Static task
static1
Behavioral task
behavioral1
Sample
2024-01-27_caf44d4c959fb1bc8eb810d2cb16f907_icedid.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-01-27_caf44d4c959fb1bc8eb810d2cb16f907_icedid.exe
Resource
win10v2004-20231215-en
General
-
Target
2024-01-27_caf44d4c959fb1bc8eb810d2cb16f907_icedid
-
Size
10.4MB
-
MD5
caf44d4c959fb1bc8eb810d2cb16f907
-
SHA1
1dcc3494856be688b40c573f67237b3b1f4d46ea
-
SHA256
72b42f272fc0c44d39b7f4f61282c3bfb40106237a91a7d22c03d79f9471fe35
-
SHA512
cabbce221b8131e6aed969023ea5302f12792fffd497d3091046509d0462403baa351db8270f286b779a185956e9a1f65f5120797ac9045636f51b936b05297f
-
SSDEEP
98304:XkPGvGDZ8C+lpiFPSO+RAEdlDZ8C+lpinFAke+rmbwdMcuuSyHFR0:XkPGvGQLO+RA0DQEm+rmbwuuSyHo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-01-27_caf44d4c959fb1bc8eb810d2cb16f907_icedid
Files
-
2024-01-27_caf44d4c959fb1bc8eb810d2cb16f907_icedid.exe windows:4 windows x86 arch:x86
6e51ebecd2a8b8a100285a503c494dae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
RtlUnwind
ExitProcess
RaiseException
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetProcessHeap
IsDebuggerPresent
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
HeapAlloc
HeapFree
lstrlenA
SetErrorMode
FlushFileBuffers
GetThreadLocale
InterlockedIncrement
FormatMessageW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalFree
LocalAlloc
GlobalFlags
MulDiv
GetModuleHandleA
InterlockedDecrement
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalUnlock
GlobalFree
FreeResource
lstrlenW
WritePrivateProfileStringW
GetCurrentProcessId
SetLastError
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
GetModuleHandleW
GetProcAddress
DeleteFileW
MultiByteToWideChar
RemoveDirectoryW
CloseHandle
WaitForSingleObject
WriteFile
ReadFile
SetFilePointer
CreateFileW
Sleep
SetCurrentDirectoryW
CreateDirectoryW
IsWow64Process
GetLastError
GetModuleFileNameW
GetCurrentDirectoryW
GetCurrentProcess
UnhandledExceptionFilter
CreateEventW
user32
LoadCursorW
GetSysColorBrush
ShowWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
ReleaseDC
GetDC
CopyRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
UnregisterClassW
DestroyMenu
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
PostMessageW
PostQuitMessage
wsprintfW
SendMessageW
EnableWindow
DrawIcon
GetClientRect
GetSystemMetrics
CharLowerW
IsIconic
LoadIconW
UnregisterClassA
gdi32
GetStockObject
GetDeviceCaps
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
CreateBitmap
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectW
SetBkColor
SetTextColor
GetClipBox
PtVisible
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegEnumKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
OpenProcessToken
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
InitiateSystemShutdownW
AdjustTokenPrivileges
LookupPrivilegeValueW
shell32
SHGetFolderPathW
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
StrCpyW
StrCatW
StrCmpNW
StrToIntA
PathFindExtensionW
PathFindFileNameW
PathAppendW
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ